Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Persistent Profiles and GNU Privacy Guard #11

Open
j-simmons-phd opened this issue Jan 31, 2022 · 4 comments
Open

Persistent Profiles and GNU Privacy Guard #11

j-simmons-phd opened this issue Jan 31, 2022 · 4 comments

Comments

@j-simmons-phd
Copy link

I have enabled Persistent Profiles for my workspaces and have run into an error using them after rebuilding the workspace image. It appears that re-building a workspace image resets /home/kasm-user/.gnupg. This leads to two errors for users who have keys stored in .gnupg.

  1. gpg: WARNING: unsafe permissions on homedir '/home/kasm-user/.gnupg' -- corrected by setting permissions on the .gnupg directory to 700
  2. Any keys previously stored are not persisted and must be re-added

Can you update the build scripts to set the expected permissions and to ensure stored keys are not lost during a rebuild operation?

Thank you.

@j-simmons-phd
Copy link
Author

Note, this is only happening with the focal-nvidia dockerfile.

@j-simmons-phd
Copy link
Author

Upon further inspection, this appears to have something to do with creating custom images. I have put in a work around in my custom images, but would still appreciate assistance in tracking down the root cause.

@mmcclaskey
Copy link

@j-simmons-phd , focal-nvidia is currently not released and is only on the develop branch. That being said, it is not guaranteed to work fully in a deployment of Workspaces 1.10.0. It is very likely that persistent profiles are broken on that image, I have opened a ticket internally to look into that. That image, and the tip of develop in general, will likely see a lot of change between now and the release of 1.11.0.

@j-simmons-phd
Copy link
Author

Copy that. Like I said, I did get a work around set up, so I am good for now. Thank you for opening the internal ticket and investigating the underlying issue. Looking forward to v1.11.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants